diff --git a/data/linux-bridge/002-linux-bridge.yaml b/data/linux-bridge/002-linux-bridge.yaml index c9bc7ca1c..e27555c72 100644 --- a/data/linux-bridge/002-linux-bridge.yaml +++ b/data/linux-bridge/002-linux-bridge.yaml @@ -22,6 +22,9 @@ spec: tier: node app: cni-plugins annotations: +{{ if .EnableSCC }} + openshift.io/required-scc: "linux-bridge" +{{ end }} description: LinuxBridge installs 'bridge' CNI on cluster nodes, so it can be later used to attach Pods/VMs to Linux bridges spec: {{ if .EnableSCC }} diff --git a/data/linux-bridge/003-bridge-marker.yaml b/data/linux-bridge/003-bridge-marker.yaml index b258b21ce..06a67c8a2 100644 --- a/data/linux-bridge/003-bridge-marker.yaml +++ b/data/linux-bridge/003-bridge-marker.yaml @@ -23,6 +23,7 @@ spec: name: bridge-marker annotations: description: Bridge marker exposes network bridges available on nodes as node resources + openshift.io/required-scc: "bridge-marker" spec: serviceAccountName: bridge-marker hostNetwork: true diff --git a/hack/components/bump-bridge-marker.sh b/hack/components/bump-bridge-marker.sh index 05bcb3104..7d2a8f79a 100755 --- a/hack/components/bump-bridge-marker.sh +++ b/hack/components/bump-bridge-marker.sh @@ -24,6 +24,7 @@ function __parametize_by_object() { yaml-utils::update_param ${f} spec.template.spec.containers[0].imagePullPolicy '{{ .ImagePullPolicy }}' yaml-utils::update_param ${f} spec.template.spec.nodeSelector '{{ toYaml .Placement.NodeSelector | nindent 8 }}' yaml-utils::set_param ${f} spec.template.spec.affinity '{{ toYaml .Placement.Affinity | nindent 8 }}' + yaml-utils::set_param ${f} 'spec.template.metadata.annotations."openshift.io/required-scc"' '"bridge-marker"' yaml-utils::update_param ${f} spec.template.spec.tolerations '{{ toYaml .Placement.Tolerations | nindent 8 }}' yaml-utils::remove_single_quotes_from_yaml ${f} ;;